We performed a comparison between Barracuda Web Application Firewall and HAProxy based on real PeerSpot user reviews.
Find out what your peers are saying about Amazon Web Services (AWS), F5, Microsoft and others in Web Application Firewall (WAF)."The most valuable features are the client VPN and content filtering."
"The updating and signature features are my primary use case for the solution. These features are beneficial to my organization."
"The most valuable feature of this solution is the simplicity of configuration."
"Parameter Protection is a valuable feature."
"There is no one special feature, but the WAF itself is valuable: user-friendly protection against web attacks etc., authentication, reporting, accountability, alerting, and hardened OS."
"Setup of this solution is straightforward. It's a stable and scalable solution, with good performance and fast technical support."
"The stability of the solution is good. I don't think we've experienced bugs, crashes, or glitches."
"Even when we were upgrading to a new OS, we didn't have any difficulties with the product. The stability is good."
"I am also able to make configuration changes during the day, in production, with no worries of problems and/or downtime occurring."
"The most important features would be the load-balancing of HTTP and TCP requests, according to multiple LB-algorithms (busyness, weighted-busyness, round robin, traffic, etc). Another important feature that we cannot live without is the username/passwd authentication for legacy systems that had none."
"The technical support has been, in one word, perfect. Every time I call, I’m on the phone with a representative within five minutes who is highly skilled and willing to help, whether in the case of critical issues or simple advice."
"Advanced traffic rules, including stick tables and ACLs, which allow me to shape traffic while it's load balanced."
"I can't speak to all of the HAProxy features because we don't use them all, but load balancing is very good."
"The VRRP redundancy is also a mission-critical feature that works seamlessly. I can bring down a server live with minimal downtime because of this."
"Reliability. HAProxy is the most reliable product I have ever used."
"The ability to handle a sequence of front- and back-ends gives the user the opportunity to send traffic through different services."
"Sometimes when we put it in action, we have some blogs that appear as false positives. I think that it's improving. Barracuda should minimize false positives."
"It is not stable nor mature."
"I have issues with the load balancing of the solution which is slow. The connection pooling in Barracuda also doesn't work. There is an issue when someone needs access to a site quickly. The issue is with HTTPS services. I am not sure if they have changed all these in the solution’s latest version."
"If you know nothing about networks, then you can't set it up."
"One of Barracuda's limitations is its user interface. The GUI for configuration is not intuitive and has remained largely unchanged for the past 10 to 12 years."
"I think the main area for improvement in this product is learning it, as can be seen when comparing it to the F5 web application firewall. F5 has a very powerful learning phase when you start using your web application firewall against your site. Barracuda has something like this, but not with the same functionality from my point of view."
"The incident reporting needs to be improved."
"They could improve their performance, support, and their upgrades. Their updates used to be good. Their improvements were right on the money but nowadays, the updates are minor."
"The reconfigurability in terms of the tooling could be improved and maybe an editor plugin can be added."
"If nbproc = 2, you will have two processes of HAProxy running. However, the stats of HAProxy will not be aggregated, meaning you don't really know the collective status in a single point of view."
"The GUI should be more responsive and show the detailed output of logs."
"The basic clustering is not usable in our very specific setup. The clustering is mainly a configuration replication and is great in a case of active-passive usage. In the case of an active-active (or with more than two nodes) where the configuration is not fully identical, it cannot be used as-is."
"The web stats UI, which provides the status of the health and numbers, could greatly benefit from having a RESTful interface to control the load-balanced nodes. Although there is a hack around the UI (by issuing a POST request to HAProxy with parameters), a RESTful interface would greatly improve the automation process (through Chef and Ansible)."
"Pricing, monitoring, and reports can be improved."
"HAProxy could do with some good combination integrations."
"Sometimes it's challenging to get through the log, and you need a log to understand what is going on. It isn't easy to map the logging with the documentation, and every time I read the log, I have to pull out the documentation to understand what I'm reading."
More Barracuda Web Application Firewall Pricing and Cost Advice →
Barracuda Web Application Firewall is ranked 14th in Web Application Firewall (WAF) with 38 reviews while HAProxy is ranked 3rd in Application Delivery Controllers (ADC) with 41 reviews. Barracuda Web Application Firewall is rated 8.2, while HAProxy is rated 8.2. The top reviewer of Barracuda Web Application Firewall writes "Provides strong issue discovery capabilities; enhance the security parameters of web applications and suitable for medium to large enterprises". On the other hand, the top reviewer of HAProxy writes "Useful for for small and quick load-balancing tasks". Barracuda Web Application Firewall is most compared with Fortinet FortiWeb, F5 Advanced WAF, Microsoft Azure Application Gateway, Kemp LoadMaster and Radware Alteon, whereas HAProxy is most compared with Microsoft Azure Application Gateway, NGINX Plus, Kemp LoadMaster, Citrix NetScaler and Avi Networks Software Load Balancer.
We monitor all Web Application Firewall (WAF) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
